6c9d3b8d63a6591b35f9a65d9c9bc8c3fd8cddbb5cccd40c357ae56387b9405f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c9d3b8d63a6591b35f9a65d9c9bc8c3fd8cddbb5cccd40c357ae56387b9405f
Size

61KB
MD5

0071fa56b8b0715ddec16a2fe126e3b2
SHA1

8d0e3ba73f1465b381571133301de0e9e433be05
SHA256

6c9d3b8d63a6591b35f9a65d9c9bc8c3fd8cddbb5cccd40c357ae56387b9405f
SHA512

49adcc3b2edd861c6b8a2653468f36bb4b264c2509ddc285972d096fc79906b05c732a18890427bb48ffc5f45a52bb9a7e59281a5216042737eb50c78fbc811a
SSDEEP

1536:WLoIHCatPT29ldaIuaUMhftcqVhQSGk9d1DwxFZBSxM:WLoIip9jnhftHhQSGkdKFZc

Score

N/A

Malware Config

Signatures

Files

6c9d3b8d63a6591b35f9a65d9c9bc8c3fd8cddbb5cccd40c357ae56387b9405f
.exe windows x86

95b992f58df6d6701a3a39610827ef2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasW
LoadLibraryA
lstrcpyW
GetVolumePathNameW
IsValidLocale
GetModuleFileNameA
lstrcpyW
DeleteFileA
GetProcessHeap
GetStartupInfoA
GetLogicalDriveStringsW
VirtualAllocEx
lstrcpyW
SetLastError
CreateEventA
GetStdHandle
lstrcpyW
lstrcpyW
GetLocaleInfoA
GetMailslotInfo
lstrlenW
GetCommState
FileTimeToLocalFileTime

termmgr

DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer

Sections

.text
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ADATA
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE